4.2 Consuming Google Cloud APIs PROFESSIONAL-CLOUD-DEVELOPER Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   Your application frequently calls the Cloud Translate API to translate the same set of static strings. The translations rarely change. You want to reduce API calls and improve response time. What should you do?

   • ABatch all translation requests into a single API call.
   • BIncrease the timeout on the API client to allow more time for responses.
   • CCache the translation results in memory with a short TTL and invalidate when the source strings change.
   • DUse the API Explorer to pre-fetch all translations at startup.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   What is a key consideration when caching API responses?

   • AAvoiding cache for read-only APIs
   • BRespecting cache invalidation and TTL
   • CCaching all responses indefinitely
   • DUsing the same cache for all users
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   You are writing a script that must call the Cloud Vision API from a machine that does not have the Google Cloud SDK installed. You have a service account key file. You need to authenticate your REST API call. What should you do?

   • AInclude the service account email and private key directly in the request body.
   • BUse the API key from the service account key file in the 'x-goog-api-key' header.
   • CSet the GOOGLE_APPLICATION_CREDENTIALS environment variable and rely on the script to pick it up automatically.
   • DCreate a JWT from the service account key and exchange it for an OAuth 2.0 access token, then include it in the Authorization header.
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   Which of the following is a characteristic of gRPC compared to REST?

   • AIt requires HTTP/1.1
   • BIt is less efficient than REST
   • CIt uses Protocol Buffers for serialization
   • DIt only supports unary requests
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   You are developing a service that runs on Google Kubernetes Engine (GKE) and needs to call the Cloud Storage API. You want to authenticate using a service account with the least privilege. You also want to avoid managing long-lived credentials. What should you do?

   • AUse the metadata server to get credentials from the node's service account.
   • BUse the default GKE node service account, which has broad permissions.
   • CUse Workload Identity to bind a Kubernetes service account to a Google service account with the necessary roles.
   • DCreate a service account key and store it as a Kubernetes secret.
   Reveal Solution Discussion Select an answer first